This commit is contained in:
@@ -35,6 +35,16 @@ export async function POST(req: Request) {
|
||||
if (!canMutate(user)) {
|
||||
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
|
||||
}
|
||||
if (user.isPersonal) {
|
||||
return NextResponse.json(
|
||||
{
|
||||
error:
|
||||
"Personal accounts cannot invite additional members. Upgrade to a company account to add a team.",
|
||||
code: "personal_account",
|
||||
},
|
||||
{ status: 403 }
|
||||
);
|
||||
}
|
||||
|
||||
const body = await req.json().catch(() => null);
|
||||
const parsed = inviteSchema.safeParse(body);
|
||||
|
||||
Reference in New Issue
Block a user